The Inner Circle

 View Only

NSA State-Sponsored Cyber Actors Exploit Network Providers and Devices

  • 1.  NSA State-Sponsored Cyber Actors Exploit Network Providers and Devices

    Posted 28 days ago
      |   view attached
    Hi All,

    This joint Cybersecurity Advisory was coauthored by the National Security Agency (NSA), the Cybersecurity and Infrastructure Security Agency (CISA), and the Federal Bureau of Investigation (FBI). It builds on previous NSA, CISA, and FBI reporting to inform federal and state, local, tribal, and territorial (SLTT) government; critical infrastructure (CI), including the Defense Industrial Base (DIB); and private sector organizations about notable trends and persistent tactics, techniques, and procedures (TTPs).

    Entities can mitigate the vulnerabilities listed in this advisory by applying the available patches to their systems, replacing end-of-life infrastructure, and implementing a centralized patch management program.

    NSA, CISA, and the FBI urge U.S. and allied governments, CI, and private industry organizations to apply the recommendations listed in the Mitigations section and Appendix A: Vulnerabilities to increase their defensive posture and reduce the risk of PRC state-sponsored malicious cyber actors affecting their critical networks.

    For more information on PRC state-sponsored malicious cyber activity, see CISA's China Cyber Threat Overview and Advisories (https://www.cisa.gov/uscert/china) webpage.

    ------------------------------
    Michael Roza CPA, CISA, CIA, MBA, Exec MBA
    ------------------------------